Re: [malware-list] [RFC 0/5] [TALPA] Intro to alinuxinterfaceforon access scanning

Greg KH
2008-08-05T21:17:24Z

On Tue, Aug 05, 2008 at 04:37:42PM -0400, Press, Jonathan wrote:
>
> [JON PRESS] I don't get the connection between what I said and your
> point about not needing blocking open() interface. If I ftp into a
> Linux machine and GET an infected file, you want FTP to go right ahead
> and read it and send it to me over the wire?

Shouldn't that be the issue of the FTP server itself not serving up
"invalid" files, and not the kernel? Why not just hook in it, I'm
pretty sure they already provide this kind of interface, right?

thanks,

greg k-h